Kitsuvo

Kitsuvo integrations

[Kitsuvo: free browser for Mac and Windows] [MCP: stdio and Streamable HTTP] [Claude Code and Codex plugin] [Node.js 22 or newer] [License: Kitsuvo Integration License] [Last commit]

Kitsuvo hides likely AI-built websites in Google, Bing and DuckDuckGo, shows the evidence, and lets you open any page anyway.

Kitsuvo is a free browser for Mac and Windows. The integrations here are the secondary, optional way to use it: they let an AI client such as Claude Code, Codex or another MCP client drive that browser. You do not need them to filter search results. With them, an agent can open a page, read it, and explain the local evidence behind its AI-built, slop and impersonation verdicts, or check a layout at phone, tablet and desktop sizes.

This repository holds the public installation sources: the plugin and its four agent skills (setup, browse, evidence, responsive), the local HTTP MCP bridge, the cloud relay connector, a Rust MCP client, and browser-extension developer previews. The browser itself is a separate download.

Get Kitsuvo: kitsuvo.com for Windows (64-bit) and macOS (Apple silicon and Intel). Free, no account. First-launch prompts are explained at kitsuvo.com/install. The plugins start the installed browser; they do not install it. The filter is also available as a browser extension.

What your agent can do

No Kitsuvo account or API key is needed for local browsing and detection.

Additional clients

Client configs and desktop extension cover Cursor, VS Code, Gemini CLI, Cline, Continue, LM Studio, Devin and remote workflow clients. Registry metadata describes the opt-in authenticated endpoint. Directory approval is separate from these install sources.

Install

Every row except the extension needs Kitsuvo installed with kitsuvo on PATH. If it is not on PATH, use the executable's absolute path as command and keep the argument mcp.

Then ask: Open https://example.com in Kitsuvo and explain its detection evidence.

Claude Code

Install Kitsuvo on Windows or macOS and make kitsuvo available on PATH. Then run:

claude plugin marketplace add leancoderkavy/kitsuvo-integrationsclaude plugin install kitsuvo@kitsuvo-browser

The local server runs in Claude Code and Cowork. It does not run on Claude web or mobile.

Codex

codex plugin marketplace add leancoderkavy/kitsuvo-integrationscodex plugin add kitsuvo --marketplace kitsuvo-browser

The plugin includes setup, browsing, detection-evidence, and responsive skills. Do not assume the connection is isolated from your normal sign-ins. On current Mac 0.2.36, local MCP reuses the normal profile by default; add --separate-profile to a direct MCP configuration for a separate persistent profile. Check your installed build's browser_status and the connection guide. Windows 0.2.4 predates browser_status and cannot satisfy the current connection check; no qualified replacement Windows release is currently published. The plugin requires the installed desktop browser; it does not install it.

Browser inside ChatGPT, Claude, Cursor, or T3 Code

The MCP App bridge provides an interactive browser panel with navigation, tabs, page controls, detection evidence and Windows/macOS previews. Pages still run in Kitsuvo on your computer. For Claude Desktop, launch node integrations/mcp-http/server.mjs --stdio after installing that directory's dependencies. For cloud hosts, use an authenticated tunnel or the cloud connector's --app mode. See panel setup and cloud setup.

Use node integrations/mcp-http/setup.mjs --host cursor --binary /absolute/path/to/kitsuvo to print a local visual-panel configuration. Hosts claude, t3code, and chatgpt have their own setup routes; see host setup. T3 Code's embedded UI depends on the selected provider and build.

Other applications can mount the same panel with the typed @kitsuvo/mcp-http/embed host SDK and an authorized MCP client. Try npm run embed in integrations/mcp-http, then open http://127.0.0.1:8787/embed. Set a private KITSUVO_MCP_TOKEN first and enter it in the example's password field. See embedding Kitsuvo for lifecycle, isolation and shared-profile details.

HTTP MCP

cd integrations/mcp-httpnpm ci --ignore-scriptsnpm testexport KITSUVO_MCP_TOKEN="$(node -e "process.stdout.write(require('crypto').randomBytes(32).toString('base64url'))")"npm start

Node.js 22 or newer is required. The bridge binds only to loopback and is for a secure, authenticated tunnel. Every HTTP request must carry the matching Authorization: Bearer <KITSUVO_MCP_TOKEN> header. See the setup guide for PowerShell. Public cloud-directory submission needs a stable HTTPS endpoint with authentication and a connection to each user's own browser. See MCP setup.

Authenticated cloud relay

integrations/mcp-cloud includes the separate OAuth-protected cloud relay and interactive local connector. The endpoint is https://kitsuvo-mcp-relay.fly.dev/mcp. Connecting forwards selected page results to the relay and the client you explicitly approve. Disconnecting revokes access. See cloud setup for prerequisites, consent, ephemeral-state limits and remaining publisher identity requirements.

Rust connector client

Build the standalone client with cargo build --locked --manifest-path crates/kitsuvo-connectors/Cargo.toml. It discovers and calls tools from explicitly approved stdio and Streamable HTTP MCP servers. OAuth credentials are stored in the macOS or Windows credential store. See connector setup for approval syntax and current provider qualification limits.

Browser extensions

Free public store installs:

Store versions can be older than the preview ZIPs, so a change in a preview may not be in the store build yet. kitsuvo.com/extensions has the current store links and preview ZIPs. The extension works without installing the desktop browser.

extensions/chromium targets Chrome, Edge, Opera, Brave and Vivaldi. extensions/firefox can be loaded temporarily for testing; use the Firefox Add-ons listing for a normal install. extensions/safari is source that needs Apple packaging and signing; use the Mac App Store listing to install. See browser setup.

The extension checks local builder fingerprints and optionally filters search results. It has no cloud AI, telemetry, or desktop companion requirement. It does not include the desktop browser's full slop or impersonation checks. Manual packages remain developer previews. Browser-store availability does not establish approval in any AI-client directory.

Security and privacy

• Choose the profile. These local plugin configurations pass mcp and inherit the installed browser's default. On current Mac 0.2.36 this reuses the normal signed-in profile, including website cookies. Add --separate-profile in a direct MCP configuration when you want a separate persistent profile. Check browser_status for your installed build. The packages do not enable --allow-sensitive.
• Sensitive pages are refused. Sign-in pages and password fields are not driven.
• Local by default. The plugin adds no analytics and no Kitsuvo-hosted upload service. Kitsuvo itself sends no telemetry.
• What the AI client sees. Tool arguments (URLs and any text you ask it to type) go to the browser. Page text, snapshots, reports and supported screenshots go back to the connected client, which handles them under its own data policy. Pages can contain personal data.
• Cloud paths are opt-in. The loopback bridge is not exposed unless you put a tunnel in front of it. The cloud relay reaches your browser only while you run its connector and after you approve a client in your terminal.
• Evidence, not proof. AI-built is provenance, not proof of harm. A low score is not proof of human authorship or safety.

Full policy: kitsuvo.com/privacy. To report a vulnerability, see SECURITY.md.

FAQ

What is Kitsuvo? A free browser for Mac and Windows that hides likely AI-built websites in Google, Bing and DuckDuckGo, shows the evidence, and lets you open any page anyway. These integrations are the optional, secondary way to let an AI agent use it.

Do I need an account, API key or paid plan? No. Local browsing and detection need none. Optional cloud AI checks in the desktop app are separate.

Does installing the plugin install Kitsuvo? No. Install the desktop browser first. The plugin runs kitsuvo mcp.

Which systems are supported? The desktop browser is for Windows (64-bit) and macOS (Apple silicon and Intel). Screenshot support depends on your installed build: request only a mode that browser_status reports, and use snapshots when image capture is unavailable. On Linux or ChromeOS, try the extension preview.

Can the agent use my signed-in browser? Yes, when it uses your normal profile: that is the local MCP default on current Mac 0.2.36. A separate profile must be selected explicitly with --separate-profile. Sensitive sign-in pages and password fields are protected by default. Page text from other signed-in pages can still reach the connected AI client.

Does it work with ChatGPT? Through the Codex local marketplace, or a cloud client via the HTTP bridge with a secure tunnel or the cloud relay.

Is it listed in the Claude, ChatGPT or browser-extension stores? The extension has public listings on the Chrome Web Store, Edge Add-ons, Firefox Add-ons and the Mac App Store (Safari), linked above. That is separate from AI-client directory approval; no such approval is established here. The local Claude Code and Codex plugin install routes use this repository.

Can it prove a site was written by AI? No. It reports builder evidence and separates AI-built, low-value content and impersonation. Detection depends on recognizable traces.

Can I fork or redistribute this? The Kitsuvo Integration License allows personal use and local configuration changes. Other modification or redistribution needs written permission from [email protected].

Something broke. Open an install help or bug report issue. See CONTRIBUTING.md.

Repository map